Improve support for VPC Security Groups in RDS

* Ensures create_db_instance passes VPC args onwards
* Bumps API version so that VPC results are returned in describe calls

When merged, should close #2365