cleaned up security group logic for manually specified network interfaces