fix secutiryGroup setting, as this is nova-only option