Constant SEALED_APPARMOR_PROFILE_PATH 

pub const SEALED_APPARMOR_PROFILE_PATH: &str = "/etc/apparmor.d/mur-sealed";

Where scripts/install.sh installs the shipped profile, and the path the refusal message tells an operator to load.