cgroup_freezer: fix can_attach() to prohibit moving from/to freezing/frozen cgroups