fix: component security group corrections

1. Security groups shouldn't be created if 'create_security_groups' is
   unset. This will protect us from creating too many rules in VPC.
2. The component class needed some updates for real realms. This was
   the source of some spurious security groups.

Change-Id: Ie9f55e3da4aad81b5bcb2943848d18d057937fe2