It isn't necessary to walk through all possible subnets when the policy
we're looking at doesn't touch that subnet.