Why do we have to create a new subnet or add the app service to an empty subnet in our vnet? I don\'t understand the reasoning since I\'m trying to use my app service (function