[server] first pass at eliminating popen() write calls with run_extcmd_write() (used for PF firewalls)