enable all device cgroup perms in privileged mode