Keep all existing ipsets
Add functionality to preserve iptables rules

Each rules which contain keyword specified in attribute
node['iptables-ng']['preserve_keyword'] will be saved and placed to the
first position of new rule set.

If preserved rule exist in non-standard chain, that chain will be
preserved too.