The text 84a3aad5767d, as Debian 9 (Stretch) shipped it.
split the confinement context into a label and mode
aa_splitcon(3) on Linux now