adding a cleaner vpc specific filter. next step is to figure out how to deal with someone having a gateway in another VPC