apparmor: being able to read hdds is useful for update tests