better regex in /etc/rc.conf for service state