It appears to work. A few things still to do: it would appear logind relies on dbus, so that's not working yet. Interestingly, udev doesn't seem to have turned up as a problem yet - it's just not being started in the guest (no msgs in journal) so not quite sure the deal there yet - will look tomorrow.
logind and dbus should probably only come in through the shell service.