The one security group you forgot to close will be the one the pentesters find first.