CAPO: The security-group "common" and "worker" shouldn't be added by default on secondary network interfaces
The heat-operator creates default security rules that are used on every worker interfaces (including Multus ones). It is possible to customize those rules by adding new ones (per interface) through the machine-deployment deinition (in the workload cluster values) but not to remove the default ones which are not required on secondary interfaces (Multus).
The security groups on secondary interface(s) should stay fully cunstomizable.