apparmor: fix policy_compat permission remap with extended permissions