do not delete sec-groups on cleanup unless specified