Use _system variables for root_user and root_group.
Add _sysem_pf_config and _system_pf_service promises.
Set _system_pf_config promise name correctly.
Add pf related promises.