Is this option needed? Isn't it reasonably to assume that if AppArmor is enabled, we want it for all services that support it?