Before when this parameter was just `groups`, 11ea79c fixed empty security groups being called.  You might want to just update that code to check `security_group_ids` instead of changing the host model.