Add security group for IPv4 and IPv6 enacapsulation

• IPv4: openstack security group rule create --protocol 4 --ingress --remote-ip 0.0.0.0/0
• IPv6: openstack security group rule create --protocol 41 --ingress --remote-ip 0.0.0.0/0

Maybe we need ipip too? calco is using ipip but I have verified that 4 worked.

$ cat /etc/protocols  | grep encapsulation
ipv4	4	IPv4		# IPv4 encapsulation
ipv6	41	IPv6		# IPv6 encapsulation
ipip	94	IPIP		# Yet Another IP encapsulation