And we thank you for it :) (sorry about that cartel sting if it bothered you) So would you accept a patch that adds a script that generates apparmor rules and adds a ExecPreStart line to the service file? Because as I said it seems like something too vendor specific.