add tests for security groups