sg-rule: support public security groups when listing

[pyr]

Rules should have a simple discriminant to understand when a public security group is being referred to