In order to communicate with MACSEC, do the servers have to be in the same segment? Why do they have to be in the same segment?