I am not sure why this is needed but for sure its not needed during bootup
Use pfSense function where possible and rename stf0 to interface_stf to allow multiple instances of iot