Fleet PCs on a trusted network can reach the GE-Enforce client endpoints
(manifest, payload, report) without a per-PC token. List the trusted
networks below. Leave it empty to require a geenforce.fetch
token instead.
10.134.48.0/23, 10.48.249.0/26. A caller from any of these
networks may pull manifests + payloads and post reports with no token.