Run a process in its own cgroup