---
pod:
  mandatory_access_control:
    type: apparmor
    metacontroller:
      metacontroller: localhost/docker-default
...