1a2d7a4bf5
By default this includes private network subnets, but those should really use authentication instead, if they want to skip checks. Closes: #326