AppArmor, SELinux and other protections

We should create AppArmor, SELinux and other kernel level protection configurations for TorBrowser.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information