PFCTL_SYNCOOKIES_NEVER
nvlist_add_bool(nvl, "enabled", s->mode != PFCTL_SYNCOOKIES_NEVER);
s->mode = PFCTL_SYNCOOKIES_NEVER;
$$ = PFCTL_SYNCOOKIES_NEVER;