add ipset and nat-t config options