main/lxc: enable apparmor

this doesn't need any additional compile-time dependencies but vastly improves security when available at runtime.