Rework app armor profiles again (#124)

This branch addresses most of the concerns I've expressed on ticket #124. What's left to discuss is the audio abstraction and the launcher starting PulseAudio.

I hope I won't have to redo work I've already done too often...