fix bad info about security groups in VPC

closes #240