Fix apparmor inside container

#5532 doesn't work with #5529


ping @tianon