Explicitly assign security group to VMs