Merge "CgroupSetupCgroups: don't leak fd."