Bug 1058225: check security group size; r=rail