Advanced AI Prompt for VPC CNI Custom Networking in EKS

Act as an EKS Networking Expert. Solve severe IP address exhaustion in a hyper-scaled EKS cluster by implementing AWS VPC CNI Custom Networking. Detail the exact `kubectl set env` command required to flip the `AWS_VPC_K8S_CNI_CUSTOM_NETWORK_CFG` flag to `true` within the `aws-node` DaemonSet. Generate the `ENIConfig` custom resources mapping to the secondary CIDR block [POD_SUBNET_IDS], explicitly forcing the CNI to allocate Pod IPs from these secondary subnets rather than consuming the primary node subnets. Implement a node labeling strategy utilizing [ENI_CONFIG_LABEL] to map instances to their respective ENIConfigs. Calculate the hard limit for [MAX_PODS_PER_NODE] based on ENI trunking constraints, and provide the command to bind the [SECURITY_GROUP_ID] directly to the Pod network interfaces for granular microsegmentation.