Comment 16 for bug 1849753

> An alternative without modifying snap-confine would be to have two snap-confine profiles, one for
> strict and one for classic, and adjust the classic template to transition to the classic
> snap-confine template which has rules allowing 'rw' access to files and 'unix' for sockets.

To me this sounds like the easier of the two approaches - can you outline any particular (dis)advantages to either approach?