Extract pf.conf generation and fix trailing newline