only create security group if it doesn't already exist