core: don't consider a unit's cgroup empty if only a subcgroup runs empty