Allow policy control of instance secgroup list

Allow elevation of a context when listing instance security groups if
the policy allows it.

Change-Id: I2f651d60dbd67e0f19a2d649ff008e583cad2a90