Set slave subsystems only in containerizer tests and cleaned up the
code using cgroups::enabled().

Review: https://reviews.apache.org/r/21585
Included the error message when nl_connect fails.

Review: https://reviews.apache.org/r/21595