kernel cmdline: enable apparmor security