Use plistref in _IOW (fixes kernel panic)