The call to unshare(CLONE_NEWCGROUP) is done unconditionally
in prepare_cgns(), which is wrong -- some detection of the
fact that we have this ns should be there.

This detection (as I see it) -- is whether we've found at
least one cgroup with cgns prefix.
Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com>