add external unblock script support

[gnif]

Using the block script it's possible to maintain an ipset, however auto-unblocked IPs will not be removed from the ipset. This commit makes it possible to define an unblock script for such purposes.