allow setting security groups