I've made a lot of progress getting a whole lxde session running as user nemo, without need to use "--no-sandbox" with chromium.