apparmor required(?) for docker images to run properly