---
libvirt:
  pod:
    mandatory_access_control:
      type: apparmor
      libvirt-libvirt-default:
        libvirt: runtime/default
...