bin/50782: `npfctl validate' should not need to talk to kernel

[riastradh%NetBSD.org@localhost]

>Number:         50782
>Category:       bin
>Synopsis:       `npfctl validate' should not need to talk to kernel
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Feb 08 01:40:00 +0000 2016
>Originator:     riastradh%NetBSD.org@localhost
>Release:        NetBSD-current
>Organization:
>Environment:
>Description:

	There's plenty of validation that `npfctl validate' can do
	without talking to the kernel.  It should do that, and have a
	separate way to make sure it makes sense with respect to the
	current kernel.

>How-To-Repeat:

	Attempt to run `npfctl validate foo.conf' unprivileged, or for
	a system that is not the current one.

>Fix:

	Yes, please!