iptables service can't be virtual anymore

Makes the iptables service create a fake PID so pf can track it's state since the iptables service is now a startable/stopable service and it's state can be read.

This (or a similar implementation) needs to be merged for PF 4.4