add cgroup cleanup support

This adds the ability to kill all processes within a service's cgroup
when that service is stopped or restarted.