Reworked SecurityGroups to work without legacy EC2.

Supports both Nova and Neutron.

Change-Id: Id9dbc4b72f861e2b7663201c01bbbfdff6d4953d