fix for EUCA-9627: added a check to add an ipset with placeholder IP in the case where a rule references an ipset that is either empty or non existant