Exclude security group related quotas when the extension disabled

When using neutron as network service and security group extension
disabled, the quotas update workflow will hit some error, because
'security_group' and 'security_group_rule' are passed to the quotas
update method for neutron.
This patch fixes the problem by excluding these two quotas when
neutron security group extension is disabled.

Change-Id: I0011e1c0956d3248b748f109d5ab5e93ec55f7d3
Closes-bug: 1330632
Merge "Exclude security group related quotas when the extension disabled"