Allow apparmor, as docker needs it