replace compute_node_security_group config with generic compute_node_ec2run_args