fix: non-vpc security groups no longer use -1 ip_protocol

Change-Id: I2735222e6a93f59c4cfe87f7984cff9567de3d14