When you create a hostpool you should have an option to configure the proper security level prior to the pool being created

As it stands now, the process would be to create an image with, say, trusted launch configured. Create a hostpool (with no option of setting up security), then after the pool is created go back into the pool properties to modify the security settings appropriately otherwise your machine creation will error out. This creates several extra steps, and can also confuse users."