Switch to getUnchecked where possible
Switch to generateSecurityGroup option, so that we fall back on the default group if nothing's specified.