Allow a list of subnets rather than just ip addresses for tokens