so that means snap refresh works with the unencrypted symlink, but not running the actual program from the snap.
so that means snap refresh works with the unencrypted symlink, but not running the actual program from the snap.