Comment 4 for bug 1208988

In addition to the above, we need to:
* add to apparmor's abstractions/private-files-strict
  # don't allow access to any gnome-keyring modules
  audit deny /{,var/}run/user/[0-9]*/keyring** mrwkl,

* add to apparmor's abstractions/p11-kit:
  # gnome-keyring pkcs11 module
  owner /{,var/}run/user/[0-9]*/keyring*/pkcs11 rw,

Adding this will allow telepathy and evince to work with the kernel change.