We have apparmor-lessopen-nfs-workaround.diff until we find a complete solution for this. Closing as FIXED.