Only update security groups if  is passed as an option. Show warning otherwise
Moved security_group into it's own module for clarity, setup warning for non-update and message for update on launch