Any way to persistently edit a single VM's AppArmor profile?