Add pfctl to `hosts` command so that port mapping always works