website: document security group description requirement