enabling apparomor for new installs