Extend networks to allow for nested IPPolicy creation

- ensures IPPolicy fits into all subnet CIDRs of the network
- ensures IPPolicy has valid CIDR itself