Give security_groups an option, so this function can be run outside of
the admin server.