EC2 Security group connection tracking adds support for configurable idle timeouts