I understand app gateway requires its own dedicated subnet, but just wondering why one would put app gateway in its own vnet (this happened on a previous architecture at work an