Constrain service group names to alphanumerics, -, and _

We'll need this for the upcoming service group refactor
described in bug 58997.

Change-Id: If4658b365e8c45d37377a275e4ada678bca2c14b