Sometimes the CIDR will come through with a non-local address. Use the "any" address for the source.
Merge pull request #4 from basho-labs/bugfix/sdc/cidr

Fix the security source.