use flat cgroups hierarchy

Mounting each subsystem separately doesn't work if there's an existing cgroup
mounted flat. LXC does this, so for Garden to run in LXC, this change must be
made.