[os_firewall] Fix default iptables args.

roles/os_firewall/library/os_firewall_manage_iptables.py

@@ -224,8 +224,8 @@ class IpTablesManager(object):  # pylint: disable=too-many-instance-attributes
     def gen_cmd(self):
         cmd = 'iptables' if self.ip_version == 'ipv4' else 'ip6tables'
         # Include -w (wait for xtables lock) in default arguments.
-        default_args = '-w'
-        return ["/usr/sbin/%s %s" % (cmd, default_args)]
+        default_args = ['-w']
+        return ["/usr/sbin/%s" % cmd] + default_args
 
     def gen_save_cmd(self):  # pylint: disable=no-self-use
         return ['/usr/libexec/iptables/iptables.init', 'save']