code: func getApparmorSecurityOpts(sc *runtimeapi.LinuxContainerSecurityContext, separator rune) ([]string, error) {
  	if sc == nil || sc.ApparmorProfile == "" {
  		return nil, nil
  	}
  
  	appArmorOpts, err := getAppArmorOpts(sc.ApparmorProfile)
  	if err != nil {
  		return nil, err
  	}
  
  	fmtOpts := fmtDockerOpts(appArmorOpts, separator)
  	return fmtOpts, nil
  }
docs: // getApparmorSecurityOpts gets apparmor options from container config.