generate ip subset file for sshuttle's '--exclude-from' argument