Enter cgroups as part of NsEnter

nit: return PathExists(dir), nil

here and elsewhere