Explicitly assign security group to VMs.