updates

* move apparmor
* use generated config file --defaults-file