The text c327e80ef5ad, as Debian 9 (Stretch) shipped it.
change to or from a "hat" within a AppArmor profile
aa_change_hat(2) on Linux now
