Must not use single ip or mask in aggregate
No unenforceable rule for members of zone_cluster