If we had unprivileged cgroup subtree management in the Linux kernel (which is something that I submitted patches for, but were rejected) then you could actuall

If we had unprivileged cgroup subtree management in the Linux kernel (which is something that I submitted patches for, but were rejected) then you could actually use cgroups on GNU/Linux with a browser not needing any privileges.