feat(profile): update kde integration.

See #310

apparmor.d/groups/kde/kioworker

@@ -11,6 +11,7 @@ include <tunables/global>
 profile kioworker @{exec_path} {
   include <abstractions/base>
   include <abstractions/deny-sensitive-home>
+  include <abstractions/fontconfig-cache-write>
   include <abstractions/graphics>
   include <abstractions/kde-strict>
   include <abstractions/nameservice-strict>
@@ -35,6 +36,8 @@ profile kioworker @{exec_path} {
   @{lib}/libheif/ r,
   @{lib}/libheif/*.so* rm,
 
+  @{bin}/wrestool rPUx,
+
   #aa:exec kio_http_cache_cleaner
 
   /usr/share/kio_desktop/directory.desktop r,