Better SG coverage

Security Groups now capture egress permission (only available in VPC), VPC ID, and Tags.
New SG unit tests