cgroup: use SIGKILL to guarantee killing processes.