netfilter: ipset: expose userspace-relevant parts in ip_set.h