remove hardcoded VPC subnet from pf.conf