Comment 4 for bug 1728551

I believe that `apparmor.git/profiles/apparmor.d/*` profiles (including abstractions) can be updated to the final version in the first run, because they will be pulled together on package update?

Meanwhile, `apparmor.git/profiles/apparmor/profiles/extra/*` and `apparmor-profiles.git/ubuntu/18.04/*` should contain that backwards compatible manual `tunables/sys` include, with a TODO:

```
TODO: remove after relevant distributions has updated "tunables/global" to include "tunables/sys"
```

Is that right?