luci-firewall: Add support for negations for ip addresses/nets (#218)