Allow sudo without tty to fix vagrant halt
Run in apparmor unconfined to fix #1