pfctl bits


getting the configuration right is the big challenge

first attempt back when we added hfsc to altq after the merge: fail

the common cases should be easy and straightforward

the more complex ones should still work and be readable