Adding CIDR support to SG

Allows adding CIDR destinations/sources to security groups, instead of
the per-app handling before

Adds extra logging and checks to make sure you don't try to define a
security group with a CIDR mask