[opensuse-security] AA profiles world readable!?

Hi there, do AppArmor profiles really need to be world readable? Would it hurt to set them to 640 or even 600? Why should user processes need to read AA profiles? If they don´t need, they shouldn´t in the first place IMHO. I mean, doesn´t only AA (=root) need to read them? Thanks