What does security.nesting=true?

just use lxc
lxc config set {container-name} security.nesting true

or
lxc config edit {container-name}
and add:
config:
++ security.nesting: “true”