refactor of security groups to allow for vpc and description

@anfleene check this out for me?
you should add the config options create expects here.