cleaned up logic for multiple security groups for vpc instances with manually specified network interfaces