switch to the systemd cgroup API