netfilter: ipset: timeout can be modified for already added elements