* Explicitly call _ensure_default_security_group before creating a new SG
* Metadata LB configuration should be synchronous
* Remove skipped tests due to missing mocks