Add in an exception for private subnets.