clarify "CIDR-scoped address"