For anyone else:

The grommet has two mounting tabs, one on the left and right side of the rectangle. I eventually saw these rubber ears and slit them with a razor blade. The grommet is out of the firewall, now it's time to do business.