Implement node limitation by netmask

The config now has a Verify.Netmask field, which is a string with
CIDR-formatted netmask, such as "fc00::/8" or "192.168.0.0/16".

Close #65