Agreed, I'd expect to be able to select the subnets from the children. Without that, you're _effectively_ creating the leaf-node restriction I talked about (for this example anyway, not generally true) - since the valid subnets are only on the leaf nodes, hosts can only be created there.