I completely support this idea, in fact I had started a design of exactly this concept about 3 years ago I just never finished it.
This is also very similar to how MacOS X appears to act. If you enable a network service the default is to enable its firewall rules and they appear to be stored with the service (that is how the GUI presents it anyway wither or not that is what really goes on I don't know). -- Darren J Moffat