adding --securitygroups so that we can push SGs only into existing VPCs