We're closer than one might think: https://blog.pfsense.org/?p=1866