put the apparmor pattern on the cds too - default is default