add dependency check for security rule's group update(), not just add()