nfq: implement 'fail-accept' option

If there is an error inside Suricata, then the packet is accepted
inconditionnaly.

This patch does not treat the case for the 'auto' running mode. I don't think this is used somewhere now.