allow Qubes-Whonix apparmor by default



Its better to make these steps reproduced by default with each whonix appvm (better than going for each single one)

but leave the installation of apparmor-profiles-hardened-debian for testers and ppl who want it.

as that Qubes wiki painful even for testing , and i dont see a reason why not whonix by default set security=apparmor.

cc @Patrick @troubadour