Service create bypass first IP (10.0.0.2)

Hi

On 1.13-RC5 and services using my 10.0.0.X overlay attachable network, I just noticed service containers created start using IPs from 10.0.0.3 and above.
What happened with 10.0.0.2? Am I missing some doc? Is this a bug I should report?