Enable libvirt's AppArmor support on lizard

This would give us better isolation between VMs.

Original created by @intrigeri on 11344 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information