Like the previous replacement module, we cannot test it properly since
it relies on `modulesPath` specialArg which home-manager initialize and
nmt doesn't.
Even though it's pointless in practice since it needs firewall for
security-oriented systems but still... could be useful for desktop
systems where security is permissive.
