enforce security groups in tenancy as well
add basic host-based firewall with guard