use default security_group if fw_rules aren't specified in the rspec