Security groups workflow update

Reasons:
 - By telling to trove-taskmanager
   that it should create security group with
   datastore default port taskmanager should
   go into config and find default datastore
   specific ports and create custom rule
   for them. But now it creates rule
   which allows access to 3306 port - here comes bottleneck,
   this port should be custom for each datastore.

Changes:
 - Rules are not optional any more, because empty
   security group is meaningless. By allowing usage of
   security groups we telling that it should contain
   rule by default, which mean "not optional";
 - Adding option group for a specific datastore (mysql, redis);
 - Adding tcp and upd ports as possible options.

Implements: blueprint security-groups-workflow-update
Change-Id: Iaf3187ba89d0674f7921cbf92e5eb24de05abc6b