lxc-android-boot.conf hack: run aa-clickhook -f on first boot to apply ubuntu-sdk template change to apparmor profiles.
ubuntu-sdk apparmor template: Restrict write access to /sys path for vision