pf: consistently malloc rules with M_ZERO
Reviewed by: kp Sponsored by: Rubicon Communications, LLC ("Netgate")