Check if it's OK to start AppArmor before live-config
Originally created by @intrigeri on #10857 (Redmine)
On a build from devel (Jessie) I see AppArmor profiles loading starting super early (as intended), but so early that live-config hasn’t done its job yet. Do we assume in any way that live-config has finished its job, before we start loading AppArmor profiles?