Normally the private files stored in the home directory of a user can be accessed by applications running with the effective UID of the user. How can I restrict a particular application from accessing certain private files, while still allowing the files to be accessed by other applications using AppArmor on openSUSE.