This release addresses #80 and #81. The defaults-aws subcommand now accepts the --region and --exclude-region flags to reduce the scope when nuking default VPCs and security group rules. It also adds the --sg-only subcommand to skip nuking default VPCs and only nuke default security group rules.