It would be good to be able to require connections within an organization to be sourced from particular IPs or CIDRs.