completely skip cgroups initialization when non-root
better error reporting for cgroups