CLOUDIFY-2603 only add rules when security group is externally provisioned