> This creates an ABI change. People have to recompile their pfctl. > I think we never guarantee this level of compatibility.
Correct. It is a binary suppled with the kernel. We pay attention if it is inconvenient. That means if you need a new binary before a new kernel. But this is in the regular order.