Yes, it works, the role of the user's systemd manager in cgroup management is clear to me: User's systemd must be activated by the pam/logind to create a consistent environment, create user's service, and initialyze user's session including /run/user, ... But the documentation is confusing anyway: The in-line comments in the /usr/share/containers/containers.conf without a single example can't replace the documentation.