add HolePunch.select_undefined to the api

this new method compares a list of security groups with those defined
in the SecurityGroups file and returns any that are not defined therein