Don't automatically add default security group if the user didn't ask for it