feat(profile): improve general integration

See #407

apparmor.d/profiles-m-r/pkexec

@@ -35,13 +35,10 @@ profile pkexec @{exec_path} {
 
   @{exec_path} mr,
 
-  # Apps to be run via pkexec
-  @{bin}/*            rPUx,
-  @{lib}/{,gvfs/}gvfsd-admin    rPx,
-  @{lib}/cc-remote-login-helper rPx,
-  @{lib}/update-notifier/package-system-locked  rPx,
-  /usr/share/apport/apport-gtk rPx,
-  #aa:exec polkit-agent-helper
+  @{bin}/*       PUx,
+  @{lib}/**      PUx,
+  /opt/*/**      PUx,
+  /usr/share/**  PUx,
 
   @{etc_ro}/environment r,
   @{etc_ro}/security/limits.d/{,*} r,