PAM module to add AppArmor change_hat functionality