This reverts commit 1e8bec50. For now, the @{pid} tunable matches all pids; see /etc/apparmor.d/tunables/kernelvars for details. So it's not worth carrying a delta vs. the upstream profile, even though this improvement makes sense: better contribute it directly upstream.