Merge pull request #14620 from hqhq/hq_cgroup_ro_optional

Remove cgroup read-only flag when privileged