devcgroup: fix permission check when adding entry to child cgroup