dnsmasq: nftset: serve from ipset config