I think we only ever want to scope to the networks subnets, no? Otherwise 2 tenets can't have 192.168.0.0/24 on different isorated networks.