Add a can't-happen firewall default: case.