It will be in LXD 5.15. Yes enabling security.csm and disabling security.secureboot is required.
security.csm
security.secureboot