Fix security groups egress toggle

Originally branched on the egress toggle too late in the process,
so we were never blocking creating egress rules.

JIRA:NCP-1681

Conflicts:

	quark/cache/security_groups_client.py

Conflicts:

	quark/cache/security_groups_client.py

quark/plugin_modules/security_groups.py

@@ -21,6 +21,8 @@ from oslo_log import log as logging
 from oslo_utils import uuidutils
 
 from quark.db import api as db_api
+from quark.environment import Capabilities
+from quark import exceptions as q_exc
 from quark import plugin_views as v
 from quark import protocols
 
@@ -37,6 +39,11 @@ def _validate_security_group_rule(context, rule):
         raise exceptions.InvalidInput(
             error_message="Remote groups are not currently supported")
 
+    direction = rule.get("direction")
+    if direction == Capabilities.EGRESS:
+        if Capabilities.EGRESS not in CONF.QUARK.environment_capabilities:
+            raise q_exc.EgressSecurityGroupRulesNotEnabled()
+
     protocol = rule.pop('protocol')
     port_range_min = rule['port_range_min']
     port_range_max = rule['port_range_max']