Fix the security source.

Sometimes the CIDR will come through with a non-local address. Use the
"any" address for the source.