netfilter: ipset: Use SET_WITH_*() helpers to test set extensions