apparmor's systemd service wasn't working when multiple profiles were defined, due to the ExecStart commands in the service file being broken into multiple lines, instead of being separated by ';'.