update blacklist atomically with `ipset swap`

Thanks for the script, I'm using it on my OpenWRT router. I made this patch to create a temporary ipset with the updated IP list and atomically swap with the actual blacklist so the blacklist is never empty. It takes almost a minute to fill the blacklist on my router, so this avoids the small amount of downtime.