fixes #2490 - filter empty EC2 security groups

Signed-off-by: Dominic Cleal <dcleal@redhat.com>