WFLY-3478 subnet-match is completely broken

A fix for subnet mask evaluation.

https://issues.jboss.org/browse/WFLY-3478
Please make this package protected, which is sufficient to support the test case.