apparmor: add missing failure check in compute_xmatch_perms