fn trusted_peer_subnets_layer( subnets: &[IpNet], ) -> Either<Extension<TrustedPeerSubnets>, Identity>