helpers/bitmask-root: the ip command is sometimes in /bin/

Upstreamed patch from Gentoo Linux

We put bin before sbin because we want sbin to have the
higher priority

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>