# devfs rule -s 300 add - < devfs_rules.raw
# devfs rule -s 300 show

# add to /etc/default/devfs.rules

[devfs_rules_tun_jail=300]
add include $devfsrules_jail
add path tun* unhide