fixed bug where it wasn't saving rules properly for lookup.  We tend to put proto:-1 in our actual playbooks, but ec2_group looks for 'all' instead