This one helped me too, especially on the special user/group mappings for lsio containers. That’s a trick.