qed: Make PF more robust against malicious VF