Complain is not set on nova-compute aa-profile at install time

[Giuseppe Petralia]

To workaround LP#1960231 we set:

juju config nova-compute aa-profile-mode="complain"

But when adding new units with:

juju add-unit nova-compute

we see that this is not applied and apparmor status shows:

0 profiles are in complain mode.
7 processes have profiles defined.
7 processes are in enforce mode.
   /usr/bin/python3.8 (4506) /usr/bin/nova-compute
   /usr/bin/python3.8 (429032) /usr/bin/nova-compute
   /usr/bin/python3.8 (429069) /usr/bin/nova-compute
   /usr/sbin/chronyd (3267)
   /usr/sbin/libvirtd (4257) libvirtd
   /snap/canonical-livepatch/132/canonical-livepatchd (3265) snap.canonical-livepatch.canonical-livepatchd
   /snap/prometheus-libvirt-exporter/7/bin/libvirt-exporter (3273) snap.prometheus-libvirt-exporter.daemon
0 processes are in complain mode.

To workaround that we had to manually set complain with:

sudo aa-complain /usr/bin/nova-compute

While this was applied to existing units with the config-change correctly.

At first glance, it appears that the aa-profile-mode is ignored at install time

This affects charm nova-compute rev. 337