Use arr_global_matches array in _iptables_dedupe_opts().