Security groups feature in #openstack D3 seems to be broken. I don't believe that rackspace will soon use that in production.