coreos: add ipset, for use with iptables

Note: for now we don't have any units to save/restore ipset data. We may
need to modify the current iptables units so looking into ipsets should
be included as part of that work.
Merge pull request #729 from marineam/ipset

coreos: add ipset, for use with iptables