Provide a better example for sites on how to enable all of the cgroup enforcement as the default example. Bug 10847
