Apparmor profile to let evince open containing folder with rox