This patch implement a option AppArmorProfile to load a specific profile for a service, following the previous SELinux patch for SELinuxProfile configuration. It also follow the same convention of being non-fatal if prefixed by -. I tested it on Opensuse only for now, and the profile still need to be loaded another way.