Some additional AppArmor paths for OCG

These shook out in testing.

Change-Id: I0cc901e378b6dcad0482965ded3926d8591334ab
Merge "Some additional AppArmor paths for OCG" into production