improved AppArmor profile