v2 - committed all patches with acks - rename OLD permission layout that cause conflicts - add libapparmor AA_MAY_XXX for file queries - add link permission helper fn - rework file_path perms per discussion - fix tests as discussed