pfctl: improve error reporting

libpfctl doesn't set errno, instead it returns error codes. Take that into
account when handling errors so that we report the actual error.

Sponsored by: Rubicon Communications, LLC ("Netgate")