destroy ipsets on explicit stop and flush, but not on restart