PF: Interface abstraction hotplug is actually a real problem. we want pf rulesets to be able to refer to interface that show up later when they show up, the ruleset should actually work :) names don't matter internally, pointers everywhere