Improves handling of forwarded headers. Fix #2094

I'd like to see tests that match an exact configured IPv6 trusted address and a configured IPv6 trusted subnet.