Fix Validate() and Filter() to prevent multiple setSubnets() calls unless update is passed.