Snapd vs upstream kernel vs apparmor

[jdstrand]

@jdstrand

Note that point ‘3’ needs a little design since snapd will be updating snap-confine’s profile dynamically.

I had an idea for how to do this in this topic Snaps and NFS /home - #9 by jdstrand