Only consider a registry insecure through CIDR matching when all of its resolved IP addresses match a configured insecure subnet. This prevents a registry that resolves to both loopback and non-loopback addresses from falling back to insecure requests. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>