envoyd: improve cgroup handling
Revert "envoyd: must run as root for cgroups"

This reverts commit 0677d01845c1d0a62eec017ac934d0d7b2842031.

We can restore this with behaviour by improving how we handle cgroups.