virt-aa-helper: better write denials handling
virt-aa-helper: better write denials handling

Better fix replacing c726af2d: introducing an 'R' permission to
add read rule, but no explicit deny write rule.

andreabolognani/libvirt,fabianfreyer/libvirt,datto/libvirt,taget/libvirt,nertpinx/libvirt,eskultety/libvirt,crobinso/libvirt,fabianfreyer/libvirt,eskultety/libvirt,eskultety/libvirt,andreabolognani/libvirt,libvirt/libvirt,eskultety/libvirt,olafhering/libvirt,libvirt/libvirt,jardasgit/libvirt,nertpinx/libvirt,nertpinx/libvirt,jardasgit/libvirt,VenkatDatta/libvirt,datto/libvirt,andreabolognani/libvirt,datto/libvirt,datto/libvirt,VenkatDatta/libvirt,andreabolognani/libvirt,crobinso/libvirt,jardasgit/libvirt,taget/libvirt,jfehlig/libvirt,olafhering/libvirt,nertpinx/libvirt,olafhering/libvirt,datto/libvirt,jfehlig/libvirt,taget/libvirt,andreabolognani/libvirt,nertpinx/libvirt,zippy2/libvirt,jardasgit/libvirt,libvirt/libvirt,VenkatDatta/libvirt,taget/libvirt,fabianfreyer/libvirt,VenkatDatta/libvirt,olafhering/libvirt,zippy2/libvirt,crobinso/libvirt,zippy2/libvirt,fabianfreyer/libvirt,taget/libvirt,jfehlig/libvirt,eskultety/libvirt,jardasgit/libvirt,crobinso/libvirt,fabianfreyer/libvirt,jfehlig/libvirt,VenkatDatta/libvirt,zippy2/libvirt,libvirt/libvirt