Proxmox 9's AppArmor 4.1 upgrade broke Intel QuickSync monitoring in unprivileged LXC containers. The workarounds require such significant security compromises that privileged containers are arguably the only realistic option now.