MFC r248697:
  When we are removing a specific set, call ipfw_expire_dyn_rules only once.