Sandbox: better support for cgroup=Flase.

This is useful to test CMS in environments where you don't have
cgroups support.