support empty rule values, and multiple regions

Small changes that got check_aws_secgroups working with multiple regions, and "handling" (read: ignoring) some otherwise bogus config I found in my instance.