cgroup: fix up to the failure to set devices

Not sure yet how to tell whether we're already in the child
cgroup.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>