security group API: protect against concurrent updates