list sec groups and allow specifying a sec group on new base instances