security group now contains rules -- cosmetic