Fix issue #5309: ec2_group: rules can't reference containing group