Comment 10 for bug 1751667

*sigh* my test case in https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1751667/comments/8 was flawed. With the PR, on a livecd the apparmor unit correctly doesn't load the policy. snapd starts at some point, notices it is on an overlay, adds the overlay snippet to /var/lib/snapd/apparmor/snap-confine and then loads all the /etc/apparmor.d/*snap-confine* profiles. So long as snapd starts before preinstalled snaps then all is fine.