public List<IPAddress> getBypassHosts() throws GuacamoleException {
        return environment.getProperty(TOTP_BYPASS_HOSTS, Collections.emptyList());
    }
Return the list of IP addresses and/or subnets for which MFA authentication via the
TOTP module should be bypassed, allowing users from those addresses to log in
without the MFA requirement.

@return
    A list of IP addresses and/or subnets for which MFA authentication
    should be bypassed.

@throws GuacamoleException 
    If guacamole.properties cannot be parsed, or an invalid IP address
    or subnet is specified.
extensions/guacamole-auth-totp/src/main/java/org/apache/guacamole/auth/totp/conf/ConfigurationService.java