Reserving resilient capacity in a network