Fix documentation to reflect real usage
Add basic AppArmor profile