Securiy group list on proj obj can be empty

Change-Id: Icb6030034284239ed85d01b8499a8a8e93937849