Move internet-facing load balancers to public subnet.