allow configuration fo local private subnet