disable MEMCG_KMEM

'strongly discouraged by upstream' https://bugs.archlinux.org/task/40818
enable DM_THIN_PROVISIONING

'needed for docker devicemapper graphdriver', says m0ikz