Sanity check: Emit an error when a `depends-on` mentions a cidr set

[theophile-scrive]

We want to avoid nonsensical outputs and tighten what can be written down. As such, sanity checks should be made to ensure that a depends-on on a cidr-set raises an error.