EC2 security group identifiers for instances - EUCA-5676

Run / describe instances now support security group identifiers in
addition to names. On upgrade we verify that group names do not conflict
with any generated group identifiers.

EUCA-5676
EC2 security group identifiers for instances pt2 - EUCA-5676

Security groups can no longer be created with names that start with sg-.

Bindings are updated so EC2 versions prior to 2011-11-01 continue to use
the group name in the groupId field.

EUCA-5676
EC2 security group identifiers for instances pt3 - EUCA-5676

Auto Scaling is updated to support security group identifiers now that
these can be passed when running instances. The security groups must all
be identified by name or all by identifier, you cannot use a mix of
identifiers and names.

EUCA-5676
Merge remote-tracking branch 'origin/dev/sjones/EUCA-5663_rebased' into testing