Security groups work. Sans tests. DB changes!!!!

Pushing this out early so it can be used by testers for funsies.
If there is pushback due to no tests I understand and I am
ambibalent to it not being accepted.