Enter cgroups as part of NsEnter

Im not sure this is correct.  Shouldn't our parent place the child's PID into the cgroups?