cgroup: use ->subtree_control when testing no internal process rule