Bug#830502: apparmor-profiles: Reconsider what profiles are shipped in /etc/apparmor.d/ and in which mode

[intrigeri]

intrigeri:
> Drawbacks of shipping not-quite-ready-yet profiles (in complain mode)
> in /etc/apparmor.d/:

Here's another one, that might be a deal breaker:

 * 'deny' rules are enforced even in complain mode, so *all* AppArmor
   users are affected by any bug in such rules