config:
linux.kernel_modules: kvm
raw.apparmor: mount fstype=nfs,
security.privileged: "true"
security.nesting: "true"
devices:
kvm:
path: /dev/kvm
type: unix-char