I have also read tips from folks who use at(1) to schedule the "safety net" firewall restoration, as opposed to using a cron(8) job. at(1) is more suited to one-shot scheduled jobs, and it is a little easier to tell it "run this ten minutes from now", for changing values of now.