pf plugin: dont reinvent code, use code from pfctl