use CommandRunner for cgroups management

This allows management of cgroups on a remote Linux backend.