Add AppArmor support to native driver + change pipe/dup logic

Closes #4458

Docker-DCO-1.1-Signed-off-by: Guillaume J. Charmes <guillaume.charmes@docker.com> (github: creack)