Add support for using ipsets as sources in a zone

I wanted to be able to add an ipset as a source in the zone without using a rich rule.  I believe this change accomplishes that.  Tested and working on CentOS 7 (salt master and minion).

Add warning header to salt-generated files

add suse_support

Reload service rather than restart

Added comment option for zone sources.

firewalld 0.4 settings

implement direct rules

fix data type in templates, which broke formula for 2016.3

add ipset support for firewalld

change the restart, it was not effective before

improvements to formula with defaults.yaml

Minor improvements

Tested formula on 2015.5.0 Archlinux and found no issues

human readable

fix header issue