cgroup: make CSS_* flags bit masks instead of bit positions