Following along hints from
https://unix.stackexchange.com/questions/450308/how-to-allow-specific-proxmox-lxc-containers-to-mount-nfs-shares-on-the-network
and elsewhere, I've updated
/etc/apparmor.d/lxc/lxc-default-with-mounting
to include simfs in the list, and then in the lxc container's...