Allow additional security groups to be specified on ELBs

[jeffj254]

We use a third party WAF in front of our Chef clusters and use security groups to restrict direct access to the ELBs to only the connecting IPs from the WAF provider. This list of IPs is too large for the single security group that the templates currently allow. It would be helpful if the templates allowed additional security groups to be specified for the ELBs