add another

usr.sbin/npf/npfctl/todo

@@ -15,6 +15,9 @@
    for system failures is probably not good enough. For example if a module
    failed to autoload, it is probably an error and it should be reported
    differently?
+-- npf algorithms like icmp, are loaded via modules. Perhaps it is better
+   to have some config magic to autoload it instead of needing to run a
+   module command.
 
 ok npf and dependent modules should autoload automagically as they are used
 ok have a way to register cloners? through a mapping file? consistently naming