Are 'personal firewalls' mostly snake oil?