add systemd service file for tlsdated
Add /usr/lib/x86_64-linux-gnu/ to AppArmor profile\

This partially addresses Debian bug #704680
update CHANGELOG