correctly translate any to all apps
intra-AWS flows are governed both by incoming and outgoing rules
traffic from unoccupied per-host IPs is permitted
workaround an IPy bug