Since you're not restricting dbus, cgmanager is actually unaffected, so this shouldn't restrict nested use at all.
Since you're not restricting dbus, cgmanager is actually unaffected, so this shouldn't restrict nested use at all.