Comment 2 for bug 1659416

Boden, I would say this is an alternative to [1]. [1] is more generic but need to be flexible enough to cover different resources. This one is simpler, only for sg-rules, and I think it would be easier to implement in an efficient manner.

[1] https://review.openstack.org/#/c/203509/