apparmor: Allow reading /dev/urandom