bugfix: get_security_group_by_id always return first element