added to (or cleared from) pf tables, since pfctl can now do this using pfctl -t tablename -T expire.