nova boot security groups nic net id x where x has port security enabled false  it will launch an instance with no warning  return an instance object with specified security groups  but the instance ports will not have security groups  this behavior does not look correct for me 