Fix security groups _update_sg to really do update

In the old implementation the function replaced the security group
rules. In the new one it will not remove rules that are already in
place.