my (undef, $digest) = PVE::Firewall::copy_list_with_digest($ipset);
PVE::Tools::assert_if_modified($digest, $param->{digest});
my (undef, $digest) = PVE::Firewall::copy_list_with_digest($ipset);
PVE::Tools::assert_if_modified($digest, $param->{digest});