oops, need to exclude VPC instances when --vpc isn't used.