Improvement request: Update security group lists of a running vm

[weizhouapache]

The required feature described as a wish

Currently user can add/remove rules in a security group
The iptables rules for running vms will be updated on the kvm host

user cannot change the security groups. technically it should be possible