Prevent slices from accessing cgroups fs