bumps to 0.0.4
makes security_groups optional in conf