Fix AppArmor profile for virt-aa-helper

The new patches

  virt-aa-helper-Fix-AppArmor-profile.patch
  virt-aa-helper-Actually-fix-AppArmor-profile.patch

which have been cherry-picked from upstream allow virt-aa-helper
to read /proc/self/fd/ and unbreak guest startup with AppArmor.