* run the service as a low privilege user and use sudo/doas to add the block rules * add support for pf firewall * write documentation for the above * add abort function for handling error logging and exit cleanup