daemon launches another shell

[Roberto Mier Escandón ]

Hey,

Does anybody knows if openning a new shell from a daemon startup script
will be allowed in confined mode?. The case is this: the daemon starts
as root and tries to execute certain script as another user

su otheruser --shell=/bin/sh -c "$SNAP/bin/thescript"

in devmode, apparmor is giving me some ALLOWED traces that i'm not
confident will be allowed when confined...

Cheers.