NSX Security groups nested blueprint

When I apply security groups to a vSphere machine in a blueprint I have no issues.

However, if that blueprint is included in another blueprint the machine does not get included in the security group like it does when it is by itself.

Can anyone else confim/deny/explain this behavior?

I am running vRA7 with NSX 6.2.1.