ipset: implement create/delete API