WFLY-3478 subnet-match is completely broken

A fix for subnet mask evaluation.

https://issues.jboss.org/browse/WFLY-3478