body server control {
         trustkeysfrom => { "SUBNET" };
         allowconnects => { "SUBNET" };
         maxconnections => "10";
         logallconnections => "true";
}
bundle server access_rules {
     access:
         "/var/cfengine/masterfiles/inputs"
             admit => { "SUBNET" };
}