Today, the default value for networkSecurityGroupRules in ARM nested templates was changed from an object to an array. This will prevent any errors if you use managedDisks-customimagevm.json without specifying a value for networkSecurityGroupRules. This is not a breaking change and is backwards compatible.