Merge "libprocessgroup: restrict SetupCgroups to one-time usage and only by init"