reconsider zone-subnet relation

[shaigbdb]

e-c-d assumes each zone has either private or public subnets, but not both, for all scaling groups (and possibly other things), and gets the subnets based on the zones.
This needs some more thinking but passing subnets is probably a good workaround.