Improve check for existing EC2 SG holes