please relocate "nameservice" usage in evince AppArmor profile

Right, so I remember why this was needed. When profiling, evince-thumbnailer needed /etc/apsswd and /etc/nsswitch.conf, so the nameservice abstraction was added. This seems rather silly, so I strace'd it:
$ strace -c evince-thumbnailer ./test_hyperlink.pdf /tmp/out.png
...
  -nan 0.000000 0 1 getuid
  -nan 0.000000 0 1 geteuid
...

I'm guessing this is do to the following:
$ strace evince-thumbnailer ./test_hyperlink.pdf /tmp/out.png 2>&1 | grep dbus
read(4, "libgvfsdbus.so: gio-vfs,gio-volu"..., 159) = 159
open("/usr/lib/libdbus-glib-1.so.2", O_RDONLY) = 4
open("/lib/libdbus-1.so.3", O_RDONLY) = 4
stat("/usr/lib/gio/modules/libgvfsdbus.so", {st_mode=S_IFREG|0644, st_size=172976, ...}) = 0
stat("/usr/lib/gio/modules/libgvfsdbus.so", {st_mode=S_IFREG|0644, st_size=172976, ...}) = 0
open("/usr/lib/gio/modules/libgvfsdbus.so", O_RDONLY) = 3
open("/lib/libdbus-1.so.3", O_RDONLY) = 3
connect(3, {sa_family=AF_FILE, path=@"/tmp/dbus-Szq019joqT"}, 23) = 0

This bug was fixed in the package evince - 2.32.0-0ubuntu10

---------------
evince (2.32.0-0ubuntu10) natty; urgency=low

  * debian/apparmor-profile.abstraction: allow read of @{PROC}/[0-9]*/status
  * debian/apparmor*: more strictly confine the thumbnailer, in particular
    with regard to networking (LP: #720961)
    - move a bunch of abstractions from the evince abstraction into the
      evince and evince-previewer profiles
    - move yelp and bug-buddy execs to evince and evince-previewer profiles
    - deny reads to /etc/passwd and /etc/nsswitch.conf. These are caused by
      calls to getuid() and geteuid() from gnome libraries, but the
      thumbnailer doesn't actually need them
 -- Jamie Strandboge <email address hidden> Thu, 17 Feb 2011 17:34:12 -0600