Trust HTTP_X_FORWARDED_FOR headers when coming from some local subnets