feat(profiles): deny gvfs-metadata when possible.

apparmor.d/groups/network/mullvad-gui

@@ -46,7 +46,7 @@ profile mullvad-gui @{exec_path} {
   /var/lib/dbus/machine-id r,
 
   owner "@{user_config_dirs}/Mullvad VPN/{,**}" rwk,
-  owner @{user_share_dirs}/gvfs-metadata/* r,
+  owner @{user_cache_dirs}/dconf/user rw,
 
   owner "/tmp/.org.chromium.Chromium.*/Mullvad VPN*.png" rw,
   owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[a-zA-z0-9]* r,
@@ -73,5 +73,7 @@ profile mullvad-gui @{exec_path} {
 
   /dev/tty rw,
 
+  deny owner @{user_share_dirs}/gvfs-metadata/* r,
+
   include if exists <local/mullvad-gui>
 }