ENH: add firewallcmd-ipset

inspired by https://bugzilla.redhat.com/show_bug.cgi?id=979622#c8