An Application-Centric Approach to Firewall Rule Recertification: Challenges and Benefits