The text b30faf547054, as Debian 12 (Bookworm) shipped it.
change to or from a "hat" within a AppArmor profile
aa_change_hat(2) on Linux now