Debian sid unprivileged container setup

gistfile1.txt

Install required packages:
# apt-get install uidmap lxc
# ..and cgmanager?  or not?  Who can say?

Enable unshare:
# echo 'kernel.unprivileged_userns_clone = 1' >> /etc/sysctl.d/local.conf
# sysctl --system

Check /etc/subuid and /etc/subgid and add ranges if missing, e.g.:
# usermod -v 886432-951967 richard
# usermod -w 886432-951967 richard

Set up user:
$ mkdir ~/.config/lxc
$ cp /etc/lxc/default.conf ~/.config/lxc/

Add UID/GID range:
$ cat .config/lxc/default.conf
lxc.network.type = empty
lxc.id_map = u 0 886432 65536
lxc.id_map = g 0 886432 65536

...still doesn't work.