swap the install order of cgroup-bin and nsenter

cgroup-bin is more likely to fail