Currently AppArmor does not log change_hat probing failures as that is part of the api (a program may make several attempts to switch before it finds a matching hat). With the addition of change_hat_v a vector of hats is passed, and we could (but don't currently) log a message if no hats are match. Do we want to make this change?