i am writing a Security Policy in Azure to disallow customers from adding full cidr range in the firewall IP allow list. I would like to restrict them to only add a single I