In the examples section of service there is an example currently labeled 'ipset', but description, ports, and protocols of the example are for 'ipsec'. I am guessing there was a typo at some point?
https://github.com/firewalld/firewalld.github.io/blob/master/documentation/service/examples.md