Spec for security groups management in Sahara

It is not acceptable to require default security group
with all ports open. Proposed solution will make Sahara
much more flexible around security groups.

Blueprint: cluster-secgroups
Change-Id: If39d1f314b0a079d510a451f4e7a51f6ed073d3f
Merge "Spec for security groups management in Sahara"