GBP: update semantics for subnets