Replaced hack with policies in ipam subnet selection