adding more of the app host hardening
removed apparmor dependency will need to switch to grsec or add the apprmor kernel module somehow