It's slightly inconvenient to have to use the 'default' security group for our slaves.

It's only slightly inconvenient, but it seems that this should be pretty easy to fix, too. I may even try myself!