rules API: protect against concurrent updates
support comments on ipset sections

Also implement concurrenty change prevention for ipset API.
correctly encode section comments as utf8