due to overlaying of the squashfs the actual paths in the live sessions
match none of the apparmor profiles. this effectively makes them useless
as none of them will work properly anyway. so, instead disable apparmor
entirely. this should be fairly sane as the live sessions are usually
ephemeral anyway, so security is less of a concern here.