Following options are removed in newest releases CONFIG_CGROUP_MEM_RES_CTLR < 3.6 CONFIG_USER_NS < 3.5 libvirt has a copy-paste syntax to correct this issue.
I'm going to keep USER_NS because iirc this is going to be re-introduced in 3.8 or something like that as it's needed for proper isolation of containers.