add a devices cgroup