add a auto_apply flag to security group.