I haven't tested this, but it came to mind when reading about --cgroup-parent.
Think we can use --cgroup-parent to create resource jails around daemon ops like build/load/import/save ? I worry about fairness (especially disk I/O) when daemon tasks like the above are co-located with "prodcution" apps. That is, until/unless we have support for dedicated image builder machines, or support for multiple docker backend graph directories. Clayton?
