dnsmasq: add explicit "set:" for client-matching options