Do not include disabled OpenVPN in vpn_networks and negate_networks

If the VPN instance is disabled, then do not put the subnet addresses into the vpn_networks and negate_networks pf tables.
Not a big problem, just noticed it while testing some OpenVPN configurations and enabling/disabling.