Security group in config

Preliminary shot at network ACLs.

Validates ACLs with manual remediation required, adds missing ones.

Doesn't handle port ranges yet.