envoyd: start taking advantage of cgroups