Same three steps the examples workflow needs, and the comment explaining the AppArmor sysctl now lives in one place.