Function is_trusted_proxy 

pub fn is_trusted_proxy(connecting: &str, trusted_proxies: &[String]) -> bool

_proxy_matches / _is_trusted_proxy: a bare entry compares exactly (the unix token never matches a real peer), a CIDR entry contains the canonicalized address.