Use restricted client for migrating security groups