adding selective rule addition & removal support to ec2_group while keeping the default behaviour