Support multiple source security groups in authorize_security_group()