LXD storage pool issue

[alpharde]

Trying to use a juicefs mount as storage backend for LXD fails with this error during container creation:

Error: Failed to handle idmapped storage: Failed getting "security.capability" extended attribute from "/var/lib/lxd/storage-pools/juicefs/containers/test/rootfs/usr/bin/ping": xattr.get /var/lib/lxd/storage-pools/juicefs/containers/test/rootfs/usr/bin/ping security.capability: no data available

xattr is already enabled, is juicefs missing some sort of posix capability?