}
	}

	return true
}

func toMaskedPrefix(c *core.CidrRange) (netip.Prefix, error) {
	ipp, err := netip.ParsePrefix(c.AddressPrefix + "/" + strconv.Itoa(int(c.PrefixLen.GetValue())))
	if err != nil {
		log.Errorf("failed to parse CidrRange %v as IPNet: %v", c, err)
	}

	return ipp.Masked(), err
}

// meshconfig ForwardClientCertDetails and the Envoy config enum are off by 1

				"application/index",
				"application/index.cmd",
				"application/index.obj",
				"application/index.response",
				"application/index.vnd",
				"application/iotp",
				"application/ipp",
				"application/isup",
				"application/java-archive",
				"application/vnd.android.package-archive",
				"application/x-tika-java-enterprise-archive",
				"application/x-tika-java-web-archive",

      <match value="[version]" type="string" offset="0" />
      <match value="[strings]" type="string" offset="0" />
    </magic>
  </mime-type>

  <mime-type type="application/iotp"/>
  <mime-type type="application/ipp"/>
  <mime-type type="application/isup"/>

  <mime-type type="application/java-archive">
    <_comment>Java Archive</_comment>
    <tika:link>http://en.wikipedia.org/wiki/.jar</tika:link>