When is it necessary to activate a license when provisioning a new Palo Alto Networks firewall?