Revert "cgfs: don't mount /sys/fs/cgroup readonly"

This reverts commit 5cfc06fae750e7222f0839a48b152c4f9da1633c.