pod:
  mandatory_access_control:
    type: apparmor
    barbican-api:
      barbican-api: runtime/default
      init: runtime/default