Bug#1010688: apparmor profile prevents -C -W

[Romain Francoise]

Duh, thanks for the report. Not sure how this was never found despite
the profile being included since 2017 and Debian having AppArmor
enabled by default since Debian 10 (for new installs). I'll fix this
in unstable but it may not qualify for a stable upload. I'll ask.