def METHOD_NAME(host, profile):
    """
    Explicitly check that enforced profiles are NOT in /etc/apparmor.d/disable
    Polling aa-status only checks the last config that was loaded,
    this ensures it wont be disabled on reboot.
    """
    f = host.file(f"/etc/apparmor.d/disabled/usr.sbin.{profile}")
    with host.sudo():
        assert not f.exists