Added support for the "device_cgroup_rules" property in services.