cgroup memory limit watcher