Apparmor

Apparmor profiles for sensu components plus sensu check for apparmor entries in the logfiles.
I'm assuming that processes that the client execs (i.e. the checks) are under this profile - is this the case or does it need its own profile per check?