How to: restrict to ip
limit a user to certain IP ranges (CIDR)  , using the global-option `--ipr`

for example, if the user `spartacus` should get rejected if they're not connecting from an IP that starts with `192.168.123` or `172.16`, then you can either specify `--ipr=192.168.123.0/24,172.16.0.0/16=spartacus` as a commandline option, or put this in a config file:

```yaml
[global]
  ipr: 192.168.123.0/24,172.16.0.0/16=spartacus
```

repeat the option to map additional users