After further testing, I found that if the VM was fully booted, it would not spit out the spurious APPARMOR_DENIED messages (after >500 attach/detach cycles). As such, it seems clear these denied messages only occasionally happen when the guest is booting.
After further testing, I found that if the VM was fully booted, it would not spit out the spurious APPARMOR_DENIED messages (after >500 attach/detach cycles). As such, it seems clear these denied messages only occasionally happen when the guest is booting.