fixes #3133 - fix security group filtering when no groups need filtering
fixes #2756 - update setting descriptions at startup
fixes #3202 - PG constraints deferred and change destroy_all to delete_all