Add support for specifying a target subnet.

This allows you to use a non-default VPC for building your AMI.

Note: security groups still work, but fog requires security group
IDs when specifying a subnet.  Specifying security groups by names
no longer works.