// Note there appears to be a bug in vishvananda/netlink here:
	// https://github.com/vishvananda/netlink/issues/992
	//
	// The "right" way to do this is:
	// if err == nl.IPSetError(nl.IPSET_ERR_EXIST) {
	// 	log.Debugf("ignoring ipset err")
	// 	return nil
	// }
	// but that doesn't actually work, so strings.Contains the error.
	if err != nil && strings.Contains(err.Error(), "exists") {