Enter cgroups as part of NsEnter

nit: maybe re-use the definition of CgroupProcs. We'd have to expose it...up to you.