Fleet PCs on a trusted network can reach the GE-Enforce client endpoints
(manifest, payload, report) without a per-PC token. List the trusted
networks below. Leave it empty to require a geenforce.fetch
token instead.
192.0.2.0/24, 198.51.100.0/26. A caller from any of these
networks may pull manifests + payloads and post reports with no token.