Found it...
When you run firewall.exe in a CMD you can see it counts several firewall rules, but it can't find any rules from Pangolin.
It will make rules for Beyond and Quickshow.
However there are rules there and it keeps adding them every time, 2 for Beyond, 2 for Quickshow.
I am running this on a laptop which is part of a Microsoft Active Directory.
I can see that the rules are made for the Private and Public firewall profiles, and NOT for the Domain profile
(which I use, because at the moment I am on my domain network)
So the way you query for the existence of these rules is wrong, or the way you set them.
Workaround is to open the Pangolin firewall rules, go to ADVANCED tab, and checkmark the domain profile.
Most likely your laptops are not part of an AD domain, so that's why you can't reproduce it.