not using -1 to -1 when authorizing security groups, because it silently fails to work