Do not enable default SG rules for system VMs if tag exists