refactor of security groups to allow for vpc and description

@anfleene check this out for me?
I think #rules_config should probably just be changed to #config