add devices cgroup check as hard requirement Upstream-commit: a07e96352600fe69ff82aeb39725f142dac06ac7 Component: engine