Could I successfully build out an opnsense firewall as a KVM, back up the config (using opnsense's built-in backup feature), install opnsense on physical hardware and then restore the backup to the new physical box? I don't see why it wouldn't work, but I haven't used opnsense before so I don't know if I'm expecting too much.