Long-running processes start getting apparmor denials after refresh

might improve this …