[openstack] two security groups are required