apparmor: add path for downloads