IPC_LOCK fails at startup?


I have created an LXC container for my vault server which works fine in general, I have set it to start at boot with a 20 delay.
However, every boot it seems to fail when starting up during boot due to VAULT being an issue in memlock or IPC_LOCK. Even manually starting vault does not fix it, I need to restart the LXC container manually before it fixes the issue.
The container is unprivileged, owned by root and mapped to a custom subgid and subuid.
Is there some systemd service I need to wait for, or why is LXC unable to give the container IPC_LOCK capabilites at start?

The host is running Ubuntu 22.04 minimal server.