cgconf: add main() thing, to somewhat isolate module-scope stuff
cgconf: work with sub-cgroup names that have dots in them (e.g. systemd slices)