DOC: add jail.conf entry for pf