SOLVED: RKMPP setup correct but missing a step to have full transcode?

[azngunit81]

[hevc_rkmpp @ 0x556fe36470] Failed to init MPP context: -1

-1 means permission issue (-EPERM).

I've granted privileges to the LXC Jellyfin container
and

Code:

lxc.mount.entry: /dev/fb0 dev/fb0 none bind,optional,create=file
lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
lxc.mount.entry: /dev/dma_heap dev/dma_heap none bind,optional,create=dir
lxc.mount.entry: /dev/mpp_service dev/mpp_service none bind,optional,create=file
lxc.mount.entry: /dev/rga dev/rga none bind,optional,create=file
lxc.mount.entry: /dev/mali0 dev/mali0 none bind,optional,create=file
lxc.cgroup2.devices.allow: a

is there another missing permission that I missed in the documentation?