providers/aws: changing order of security group cidrs doesn't affect
things