Improve PFRule compatibility with pfctl parser

As reported by Gustavo Gomez, a rule like:
pass on all proto icmp all
though perfectly valid and correctly handled by PF, would raise a syntax
error when parsed by "pfctl -e".
Removing the "on all" will allow to dump rules created with py-pf and
load them smoothly into pfctl.