Drop obsolete manual enabling of AppArmor on the kernel command-line: it's now enabled by default (refs: #14789). … and the (Tails - Debian) delta gets smaller :)