Clarify flags argument of X509_check_ip