Fix: ensure new fog works with ec2

One fix involves how security groups were being cached in ironfan
with a prepended 'vpc-deadbeef:' but lookups are later performed
without the prefix.  The fix is to cache the security group with
both prefixed and non-prefixed keys, to guarantee non-breakage in
other cases.

The second fix is to text matched in an error message about duplicate
security groups that we were matching/ignoring.  The error text
changed somewhere upstream, so we widened the net on how the text
is matched.

Change-Id: Ie98d558fd95e1e54fe67592e10dc61ce8aac53a2