FreeBSD 15 permission for pfctl

[Matthias Fechner]

Dear all,

it seems that with FreeBSD 15 there is additional permission required to
execute pfctl.

With FreeBSD 14 I had in /etc/devfs.conf:
own     pf    root:icinga
perm    pf    0640

this allowed the group icinga to use pfctl, but now I get:
pfctl: Failed to open netlink: Bad file descriptor

does anyone have a idea what additional change in FreeBSD 15 is required
to allow a normal user to use pfctl to read information about the pf
firewall?

Thanks a lot!
Matthias