ipset: size optimizations