added AppArmor sandboxing profile