Now with subnet-mask based security.