Don't record empty security_groups as provisioned objects