[Service]
AppArmorProfile=secureboot-db.service