Only allow access to clusters from defined networks

By default a cluster should only be accessible from the machine that launched it, unless the client CIDR is specified to describe the machines that may access it.