Wrap Totem to torify it with torsocks.

Also, AppArmor: allow Totem to read torsocks.conf. Technically speaking, it's
not really required, as the compiled-in defaults are the same as whatever is in
the stock torsocks.conf. But still, this avoids nasty error messages in the logs
and when running Totem from a terminal.