Express route provides a private connection between on premise data center and Azure. Since traffic does not go over the Internet, why is a public address needed for the Express Route Gateway? I would expect the Express Route Gateway to use an IP address from the private IP address space from the VNet.