How do I get nfs-server to run in an LXC Unprivileged Container?

Code:

# service nfs-keel-server restart * Stopping NFS keel daemon                                                                                [ OK ] 
 * Unexporting directories for NFS keel daemon...                                                          [ OK ] 
mount: permission denied
 * Exporting directories for NFS keel daemon...                                                            [ OK ] 
 * Starting NFS keel daemon                                                                                       rpc.nfsd: Unable to access /proc/fs/nfsd ero 2 (No such file or directory).
Please try, as root, 'mount -t nfsd nfsd /proc/fs/nfsd' and then restart rpc.nfsd to correct the problem
                                                                                                             [fail]
# mount -t nfsd nfsd /proc/fs/nfsd
mount: permission denied

Code:

[1297233.302723] audit: type=1400 audit(1463013825.147:135): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-default" name="/proc/fs/nfsd/" pid=5018 comm="mount" fstype="nfsd" srcname="nfsd" flags="rw"[1297233.302897] audit: type=1400 audit(1463013825.147:136): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-default" name="/proc/fs/nfsd/" pid=5018 comm="mount" fstype="nfsd" srcname="nfsd" flags="ro"
[1297233.316298] audit: type=1400 audit(1463013825.159:137): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-default" name="/proc/fs/nfsd/" pid=5030 comm="mount" fstype="nfsd" srcname="nfsd" flags="rw"
[1297233.316361] audit: type=1400 audit(1463013825.159:138): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-default" name="/proc/fs/nfsd/" pid=5030 comm="mount" fstype="nfsd" srcname="nfsd" flags="ro"

Code:

# Do not load this file.  Rather, load /etc/apparmor.d/lxc-containers, which# will source all profiles under /etc/apparmor.d/lxc


profile lxc-container-default flags=(attach_discoected,mediate_deleted) {
  #include <abstractions/lxc/container-base>


  # the container may never be allowed to mount devpts.  If it does, it
  # will remount the host's devpts.  We could allow it to do it with
  # the newinstance option (but, right now, we don't).
  deny mount fstype=devpts,
  mount fstype=rpc_pipefs,
  mount fstype=nfs,
  mount fstype=nfsd,
  mount options=(rw, bind, ro),
}