OS-1535 allowed-ips should let you specify prefixes