update install scripts - isolate, isolock, cgroups

isolate
- chgrp isolate to web user and disallow execution by others

isolock
- setuid to isolock user for lock directory
- chgrp isolock to web user and disallow execution by others

Control Groups
- mount cgroups via libcgroup1 and cgroup-bin
- the cgroup-bin APT package automatically starts the cgconfig service
  which mounts the various controllers

JDK install script
- allow cancel install/update of JDK and still continue install process
  because JDK updates are large downloads