Cosmo - OpenStack security group provisioner