Add apparmor role to confine network services

Confine services that we install on vagrant that listen to the network.
Starting with redis. Mysql is already confined by Ubuntu by default.
Confining all of apache might be done in another patch. A followup
patch will confine applications that are executed by MediaWiki.

Change-Id: I088df8163ceb87459aaa1555aca01debc0ec7bf9