Comment 8 for bug 1260048

With newer oxide on 14.10, we are hitting this again:
apparmor="DENIED" operation="mkdir" profile="com.ubuntu.developer.webapps.webapp-amazon_webapp-amazon_1.0.9" name="/home/phablet/.pki/" pid=30367 comm="webapp-containe" requested_mask="c" denied_mask="c" fsuid=32011 ouid=32011

Seems that oxide should allow for specifying an alternate shared nssdb. Once it can do that, the UbuntuWebview could examine "applicationName" from MainView like with other QML components and do this for the app automatically. webapp-container, html5-container, cordova, et al would need to setup Oxide to do this as well.