cgroup: initial implementation
pflask: better options validation