Make cache_subnet_group default to empty security groups
Make cache_subnet_group default to empty security groups

Since they can't be specified together, it seems like setting the
default to no security groups is the right option.

thaim/ansible,thaim/ansible