Cgroup

Add support for (optionally) running nix-daemon actions in cgroups of calling process. Supported only if daemon can access given cgroups.