*.spec.in: added ipset requirement to manage VPN dynamic zones. Refs #1957