VPCSecurityGroups for RDS should be a list, not a basestring