This functionality simply did not work, with Libvirt continuing to dump its processes into the root cset thus defeating the purpose entirely. Just remove it, from some very initial testing it isn't worth the headache.