Switching to proc:mixed improves container isolation and is not required
for Bullseye.
But cgroup:mixed is required for container to start, as it provides
ability for the container to manage own cgroups (but not parents).
Change-Id: Ifce5b9673319d077e57cdf8a28b182b57b7d4507