Add apparmor change hat functionality to fpm

With this patch the pool config gets the additional parameter `apparmor_hat`.
Workers of this pool change their app armor hat to the configured one during spawn.