Hello tom,
i just wanted to usb an usb key with our CT (LXC) ... and the nightmare suddenly begun !!!
i read some advices that only privileged containers can mount then write read usb key ...
So decide to change this in Ct conf (nano ....)
And all some uid mapping have becum broken ... 
unable...