cleanup
record subnet CIDRs in resources output
simplify readme