Code review comment for lp://staging/~vila/ubuntu-ci-services-itself/secgroups

I tried firewall-mode: global this evening. After two runs, I only have two secgroups.. Seems that it works just fine. I'd recommend we stick to that.