[Skunkworks] Securing a /29 subnet