implement VM ipsets, allow long ipset names