Compare set of violating controllers more precisely

Previously the simple SDN switch only checks if the current set
of controller IDs is the same as the previous set. Instead, we
should check whether the former is a subset of the latter.