One thing that was sneaky was that how the rust coreutils are laid out invalidated a bunch of AppArmor.