[WM] add support for additional NAT source CIDRs

We'll use this to allow NAT'ing some traffic from VPN clients (to IP
whitelisting peers, for example).
bump version to 1.0.1