I spent a couple of days getting this all working so I thought I would post here in order to help others who may be struggling.
Most of this is in the docs here, but some things are not obvious: https://pve.proxmox.com/wiki/Pci_passthrough
/etc/modprobe.d/kvm.conf
options kvm ignore_msrs=1...