Support per-ss cgroups