On-the-fly sets update

[qdeslandes]

Sets are currently created and filled once: when the corresponding BPF program is loaded into the kernel. If a set is modified in the ruleset, the whole BPF program is regenerated and the set is re-created, even if none of the rules changed.

bpfilter should be able to update a set without re-creating the corresponding BPF program.