changed to robustly set the config on a security group, and then check that it was successfully set.