apparmor patch: should have a name, broke nixpkgs tarball