ipvs: fix refcount usage for conns in ops mode