[openstack-community] modify policy for security group on neutron