Control update, delete for cisco-network-profile

Add new behavior to control update and delete operations for the
cisco-network-profile resource extension.
The new behavior is to allow update and delete operations only if
there are no neutron networks associated with a particular
cisco-network-profile instance

Change-Id: I000a03c1ffd5c02e7b827ec757287633e5a5dd64
Closes-Bug: #1323867
(cherry picked from commit accd56fea86a0cd5f1706cbdd5b1bbc31c4cf479)
NSX: Remove unneed call to _ensure_default_security_group

This patch removes an unneeded call to _ensure_default_security_group
which does not need to be called in create_security_group_rule_bulk()
as one would need to call get_security_groups() to look up the uuid
of the default security group which be would created it for us, BOOM!

Change-Id: I628a94c7ea9553dcefa68fa956f25244f0abbb18
Closes-bug: 1340536
(cherry picked from commit e2dac9daf39d9b519df14441bbeb99c3c4a7bfaa)
Merge "NSX: Remove unneed call to _ensure_default_security_group" into stable/icehouse
Merge "Control update, delete for cisco-network-profile" into stable/icehouse