wireguard: allowedips: remove nodes in O(1)