spured from pf-onstrings/puppet/module/sealion