feat(snap): do not confine snap.

Curently ignored because of some incompatibilities with snap-confine.

snap-confine is more important to confine than snap itself.

apparmor.d/profiles-s-z/snapd

@@ -77,7 +77,6 @@ profile snapd @{exec_path} {
   @{bin}/kmod                     rPx,
   @{bin}/mount                    rix,
   @{bin}/runuser                  rCx -> runuser,
-  @{bin}/snap                     rPx,
   @{bin}/sync                     rix,
   @{bin}/systemctl                rix,
   @{bin}/systemd-detect-virt      rPx,
@@ -88,7 +87,7 @@ profile snapd @{exec_path} {
   @{bin}/update-desktop-database  rPx,
 
   @{bin_dirs}/fc-cache-*              mr,
-  @{bin_dirs}/snap                   rPx -> snap,
+  @{bin_dirs}/snap                  rPUx,
   @{bin_dirs}/xdelta3                rix,
   @{lib_dirs}/@{multiarch}/**         mr,
   @{lib_dirs}/@{multiarch}/ld-*.so   rix,