securityGroupsSupported is a CloudStack thing - so CloudStack will always have the SecurityGroupExtension, but not all CloudStack zones will support security groups. If that makes any sense.