HTTP 400 Bad Request when configuring security group

[hackdna]

Private Cloud Launch instance, commit 8d537a8. CloudMan security group (sg-8b3b99f3) exists (created earlier by https://launch.usegalaxy.org). Relevant entries from tasks.log:

[2016-04-11 16:46:01,747: DEBUG/MainProcess] Launching cluster 'cm-test' on Amazon - Virginia cloud from image ami-b45e59de on instance type c4.large.
[2016-04-11 16:46:02,018: ERROR/MainProcess] 400 Bad Request
[2016-04-11 16:46:02,018: ERROR/MainProcess] <?xml version="1.0" encoding="UTF-8"?>
<Response><Errors><Error><Code>InvalidPermission.Duplicate</Code><Message>the specified rule "peer: sg-8b3b99f3, TCP, from port: 0, to port: 65535, ALLOW" already exists</Message></Error></Errors><RequestID>0b0a4d57-00f7-46d1-9be2-4da85221a3db</RequestID></Response>
[2016-04-11 16:46:02,019: ERROR/MainProcess] A problem with security group authorization: the specified rule "peer: sg-8b3b99f3, TCP, from port: 0, to port: 65535, ALLOW" already exists (code InvalidPermission.Duplicate; status 400)
Traceback (most recent call last):
  File "/srv/cloudlaunch/.cl/local/lib/python2.7/site-packages/bioblend/cloudman/launch.py", line 307, in create_cm_security_group
    cmsg.authorize(src_group=cmsg, ip_protocol='tcp', from_port=0, to_port=65535)
  File "/srv/cloudlaunch/.cl/local/lib/python2.7/site-packages/boto/ec2/securitygroup.py", line 203, in authorize
    dry_run=dry_run)
  File "/srv/cloudlaunch/.cl/local/lib/python2.7/site-packages/boto/ec2/connection.py", line 3191, in authorize_security_group
    params, verb='POST')
  File "/srv/cloudlaunch/.cl/local/lib/python2.7/site-packages/boto/connection.py", line 1227, in get_status
    raise self.ResponseError(response.status, response.reason, body)
EC2ResponseError: EC2ResponseError: 400 Bad Request
<?xml version="1.0" encoding="UTF-8"?>
<Response><Errors><Error><Code>InvalidPermission.Duplicate</Code><Message>the specified rule "peer: sg-8b3b99f3, TCP, from port: 0, to port: 65535, ALLOW" already exists</Message></Error></Errors><RequestID>0b0a4d57-00f7-46d1-9be2-4da85221a3db</RequestID></Response>
[2016-04-11 16:46:02,019: INFO/MainProcess] Done configuring 'CloudMan' security group