hack ec2_group to be able to add ingress rules with security groups from other accounts, such as amazon-elb/amazon-elb-sg