Make the mandatory flag on security group create/update into an arg.

[Finishes #74558576]