demo user does not allow secgroups to be changed

So there is no point trying it and then failing
Clean out prefix stuff