fix for ec2 security group creation

It looks like the cloud and facet security groups aren't being created
soon enough, which is causing trouble when launching instances in VPC.