Use correct resource type for security group tags - EUCA-5273

The resource type for security group tags is now security-group. Tag now
allows sub-classes to override the policy resource name for a resource
type where the tag resource type differs from the policy resource name.

EUCA-5273
Merge remote-tracking branch 'origin/dev/sjones/EUCA-5273' into testing