add apparmor exception for lxc; via https://github.com/zpatten/lxc/blob/master/spec/support/install-lxc.sh