Currently, for the projects tools/toolsbeta all the vms belong to the security group default, that allows any traffic between vms in the same project.
Review if that's what we want, if so we might want to remove any other security group that only handles intra-project traffic (like tools-new-k8s-full-connectivity) as they don't have any effect.
WARNING: this means that the groups might block some traffic that we need between the instances when enforced.