add apparmor:

Signed-off-by: Victor Vieux <vieux@docker.com>