Maybe we can make it a model config with the default to reset secgroups on changes but it's overridable per model?
Maybe we can make it a model config with the default to reset secgroups on changes but it's overridable per model?