securitygroup updates

(had to) fixed indentation - ref #614
replaced protocol start values where -2 with -1 (AWS uses -1 to specify
ALL - see docs:
http://docs.aws.amazon.com/AWSEC2/latest/APIReference/ApiReference-query
-RevokeSecurityGroupEgress.html ) Ref #797
- replaced "wildcard" protcol "ICMP" with "ANY" - this is true of AWS.
Ref #797