"Wouldn't it be nice if" one could take any existing /etc/sysconfig/ip{6,}tables*, and update to firewalld without having to touch any of the configuration manually?