For fully unprivileged cgroup2-only containes you might want to use something like:
systemd-run --unit=java --user --scope -p "Delegate=yes" -- lxc-start
For fully unprivileged cgroup2-only containes you might want to use something like:
systemd-run --unit=java --user --scope -p "Delegate=yes" -- lxc-start