This is a race between /etc/init/cups and /etc/init.d/apparmor. /etc/init/cups should include a stanza to load the AppArmor profile like all the other /etc/init services that have AppArmor profiles.
$ sudo aa-status
...
1 processes are unconfined but have a profile defined.
/usr/sbin/cupsd (2137)
This is a race between /etc/init/cups and /etc/init. d/apparmor. /etc/init/cups should include a stanza to load the AppArmor profile like all the other /etc/init services that have AppArmor profiles.
$ sudo aa-status
...
1 processes are unconfined but have a profile defined.
/usr/sbin/cupsd (2137)