PaX patch + AppArmor - shouldn't this work?