Comment 2 for bug 1554728

Looks like for some reason the nova CLI or API request adds the default security group to the instance, and therefore the port. Which is why that error occurred. There might be a way to specify that an instance to be launched should not be part of any security groups when spawned, but overall I think this is a bug, since we stated that port security is disabled on the network your port is associated with.