OK, finally implemented ipsets for VMs. I also allow arbitrary long ipset names for now, using a FNV digest if name is too long. But we should restrict names length anyways - any suggestion for max length (64 charactes?)? also what should be max length for alias names?