use twisted protocol.ProcessProtocol to launch the firewall

The firewall (for VPN and email) uses subprocess, what blocks until is up. Will be nicer to do it the twisted way, the same we do with openvpn. Maybe we could have on protocol.ProcessProtocol class for all bitmask-root stuff.

(from redmine: created on 2014-09-09)