Add AppArmor detection, and proper generation of LXC config.
Update Dockerfile and documentations to remove aa_profile hacks.