One security group per machine type