Stop using cidr_range when setting up CloudMan-required security group and resort to using the group itself. AWS has supported this for a while and so does OpenStack now (not sure about other clouds).