Allow tcp, udp, icmp, all for --protocol param of ec2 create-network-acl-entry

Allow the --protocol option of ec2 create-network-acl-entry command to accept tcp|udp|icmp|all in addition to the numeric protocol numbers.  The docs for the command already say it does this but the actual EC2 operation supports only integer values.