allow zygote cgroup:file create;