add cookbook_file to put the cgroup_device_acl option into /etc/libvirt/qemu.conf