The text 87bdaa3bd021, as Debian 8 (Jessie) shipped it.
change to or from a "hat" within a AppArmor profile
aa_change_hat(2) on Linux now
