Some libguestfs / guestfs-tools operations currently fail because AppArmor
blocks an mknod operation.

For example:
> virt-customize -v -x -c qemu:///system -d some_virtual_machine --hostname foobar

Output:
> Failed to bind UNIX domain socket: Permission denied
> libguestfs: trace: launch = -1 (error)
> virt-customize: error: libguestfs error: passt exited with status 1

/var/log/audit/audit.log:
> type=AVC msg=audit(1733392351.800:690): apparmor="DENIED" operation="mknod" class="file" profile="passt" name="/run/user/1000/libguestfsueOZkq/passt.sock" pid=27424 comm="passt.avx2" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000