Comment 6 for bug 1658682

It's perfectly valid case to have installation without security groups but with port security. Port security protects environment from forged traffic from guests, and security groups protects guests from incoming traffic.

For most cases default behavior is fine, but when we want to disable port security for some ports because (regardless of been disabled) there is a default security group on the port we can't remove (because security groups are disabled).