netfilter: ipset: options and flags support added to the kernel API