feat(profile): enable desktop user variable everywhere.

Also restrict access to these files.

apparmor.d/groups/freedesktop/xwayland

@@ -28,8 +28,6 @@ profile xwayland @{exec_path} flags=(attach_disconnected) {
   /usr/share/fonts/{,**} r,
   /usr/share/ghostscript/fonts/{,**} r,
 
-  owner /var/lib/gdm{3,}/.cache/mesa_shader_cache/index rw,
-
   owner /tmp/server-@{int}.xkm rwk,
   owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} rw,
   owner @{run}/user/@{uid}/server-@{int}.xkm rw,