Use pf rules file from dotfiles, not symlink