Fixes #1823

Documentation of security_groups argument doesn't mention VPC