make sure security_groups and network work both - machine creation is
quite different - hence the split