apparmor module must be setup BEFORE calling apparmor::define