firewall: - introduce per-section "option enabled" which defaults to "1" - useful...