qvm-tools: fix qvm-firewall -r

qvm-tools/qvm-firewall

@@ -308,11 +308,11 @@ def main():
 
     if changed:
         vm.write_firewall_conf(conf)
+        qvm_collection.save()
     if changed or options.reload:
         if vm.is_running():
             if vm.netvm is not None and vm.netvm.is_proxyvm():
                 vm.netvm.write_iptables_qubesdb_entry()
-        qvm_collection.save()
 
     if not options.do_list:
         qvm_collection.unlock_db()