aws_network_acl: return error if rule protocol is invalid