allow the use of group names as well as ids when specifying security groups

Current implementation requires group_ids only, this patch allows a mixture of security group ids and security group names. It resolves the requested set early and reports if any of the requested groups cannot be resolved.