Document use of local_cidr firewall rules in the firewall section of the unsafe_routes guide

[johnmaguire]

Since v1.7.0, local_cidr can be used to specify IP addresses in the unsafe_routes subnets exposed by a host, within that host's firewall rules. Our unsafe_routes guide makes no mention of this, and so the firewall rule will also apply to ports on the routing node itself.