Audio works. Not sure how though, –unshare-devsys is supposed to not share the hosts devices, but I guess audio devices are an exception.
The full isolation flags are:
<span style="color:#323232;">--unshare-devsys: do not share host devices and sysfs dirs from host
</span><span style="color:#323232;">--unshare-ipc: do not share ipc namespace with host
</span><span style="color:#323232;">--unshare-netns: do not share the net namespace with host
</span><span style="color:#323232;">--unshare-process: do not share process namespace with host
</span><span style="color:#323232;">--unshare-all: activate all the unshare flags below
</span>