Added a security_groups container to dsl/compute, and changed providers to respect both cloud defined and compute defined security groups.