Allow multiple CIDR ranges to be specified

This patch allows multiple CIDR ranges to be specified as a Puppet array. This
is required for permitting both tin and fenari to connect to logsmsgbot, since
a single CIDR range cannot span exactly those two machines' IPs.

Change-Id: I35c043361b60ea99efb5f06117bd6f107280dde5