allow config to specify security group names as sources for rules
add spec checking equivalence of using group_id vs group_name