Possibly related, now I think about the kernel I use... It's a minimally configured 3.14 series vanilla kernel (tracking the 3.14 long term stable branch), and it's missing apparmor. Could that be the cause? I do have a few systems running with the normal 13.1 kernels (3.12.53 at the moment), and don't see these abandoned scope units there. They don't have that many cronjobs, though. Just added a minutely cronjob to test there. Coming week I'll try and put the standard kernel on one of my host systems where I see the symptoms. The hosts should work with standard kernels (though I never tried after base install). Will report results by mid week.