Make it easier to say exactly which hosts the Firewall checker should accept.

For instance, if we want to use the same code for checking whether
only the configured bridges are contacted, we don't have to allow
contact to the TOR_AUTHORITIES too.