Only reload config hard when restarting the 'pf' service