AppArmor module and profile for OCG

Introducing the AppArmor module! Whoo!

OCG uses this to sandbox itself away from the rest of the world; so
does MySQL but they weren't nice enough to create a module :'(

Change-Id: Ie440d38cd9b792e084b1f3d159a9cbcbe54f3967
Merge "AppArmor module and profile for OCG" into production