change cgroup memory limit to 512mb; put parent ID of pam_script into each controller group's tasks list