Add arbitrary IPs to the Simulator Security Groups

[s-irvine]

Feature statement
At the moment simulator only allows access to the cluster from the specific IP that created it. It would be very useful to allow a user to specify an IP or CIDR so they can access the cluster from a known internet location. This would ease one of the quiet user experience issues we have and allow users to mitigate issues with IP changes due to intermediate networking.

Proposed approach
Ideally a user would be able to specify these IPs/CIDRs on the cli with some -- options and be able to run a specific simulator command. There should also be a command and -- options to remove specific CIDRs/ IPs, including the ones automatically discovered by simulator. The IPs and CIDRs should survive a simulator infra create but not a simulator infra destroy.