I guess I meant empty allocation pool, ~~pass in an empty list for allocation_pools when creating a subnet, []~~ create an ip policy of full exclusion, which is a test in krauq since it integrates two apis. 

The striked out portion isn't actually implemented that way, though it could be.