Add or document globing in AppArmorProfile spec

[Edan-Hamilton]

What would you like to be added:

Various globs are available in an AppArmor profile, such as path*, /**/path, and /base/{path1,path2}. If this is also supported by the AppArmorProfile spec, then it should be documented. If it is not supported, it should be supported.

Why is this needed:

Globing reduces the number of redundant rules that need to be written, and allow for rules where the precise path may not be known.