Move app armor resources up to make them run before we try to start service