add vars.json to apparmor and give it rwk