cgroup: reject cgroup names with '