cgroup: if container is stopped return -1

STOPPED is actually 0, which means success, and leads the caller to
trick himself into a segv.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>