Comment 5 for bug 993706

(The problem is actually that we need to make sure to mount our own /proc, else, when using lxc.rootfs=/, we leave the host's /proc mounted, and the apparmor library tries to set the lxc profile for the wrong task)