Apparently ionice is set automatically when nice is set.
Now using user namespaces which allow unprivileged users to create the sandbox.