Better support for setting up and removing private cgroups