[00:27] <amurray> deathmist: you can create a profile for bwrap itself locally if you want (but we haven't done that for the distro since it would allow any malware to just call bwrap to get a new user namespace and hence bypass this restriction)
[00:28] <amurray> eg. a profile like the ones mentioned in https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2046844/comments/5 should be sufficient for your needs
[00:28] -ubottu:#ubuntu-next- Launchpad bug 2046844 in angelfish (Ubuntu) "AppArmor user namespace creation restrictions cause many applications to crash with SIGTRAP" [Critical, In Progress]