We want to specify a security group name, but we have to use an ID.

Auto-create the 'blocked' security, unless it already exists.  Map it to an ID.