libcurl3 is a google-chrome dep, and moving TBL down so it can have it's AppArmor profiles loaded before launching