The allowed_cidrs value could be an empty list if the request involves the sdk, so change the check to account for that. Change-Id: I2df7e5a944cbd40c60943ad105f6e09f7afa85a9 Closes-bug: #1896603