When adding a Zero Touch Provisioning (ZTP) firewall to Panorama, when can the firewall be powered on?