- introduce 'firewall-changed' event - add reload_firewall_for_vm stub function Should that function be private, called only from appropriate event handlers? QubesOS/qubes-issues#1815