Due to a bug in cgroups helper library, the cgcreate generates "bin/cgcreate: can't create cgroup ducc/test: Operation not permitted" which is logged and gives an impression that something is wrong. Despite the error msg, the cgroup container is created.
When processing stdout/stderr when running cgcreate filter out the error message to avoid the confusion. In case there is an actual problem creating a cgroup, the agent runs secondary test to validate existence of cgroup after cgcreate completes. This test will catch and report a failure and disable cgroups.