SecGroup: Handle cases when security group has empty rules