WIP: security group lockdown - i.e. remove SSH