feat(profiles): better system nss rules in nameservice-strict.

apparmor.d/groups/virt/cockpit-bridge

@@ -39,7 +39,6 @@ profile cockpit-bridge @{exec_path} {
 
   owner @{user_cache_dirs}/ssh-agent.[0-9A-Z]* rw,
 
-  @{run}/systemd/userdb/ r,
   @{run}/user/@{uid}/ssh-agent.[0-9A-Z]* rw,
   @{run}/utmp r,
 

apparmor.d/groups/virt/cockpit-session

@@ -33,7 +33,6 @@ profile cockpit-session @{exec_path} flags=(attach_disconnected) {
 
   @{run}/faillock/[a-zA-z0-9]* rwk,
   @{run}/systemd/sessions/*.ref rw,
-  @{run}/systemd/userdb/ r,
   @{run}/utmp rwk,
 
   /var/log/btmp rw,