fix(xdg-permission-store): add `nameservice-strict` and `.local/`

[REmerald]

Should fix

$ aa-log xdg-permission-store 
ALLOWED xdg-permission-store open /etc/nsswitch.conf comm=xdg-permission- requested_mask=r denied_mask=r
ALLOWED xdg-permission-store open /etc/passwd comm=xdg-permission- requested_mask=r denied_mask=r
ALLOWED xdg-permission-store mkdir owner /.local/ comm=xdg-permission- requested_mask=c denied_mask=c
$ aa-log -r xdg-permission-store 
profile xdg-permission-store {
  owner /.local/ w,

  /etc/nsswitch.conf r,
  /etc/passwd r,
}

[roddhjav]

Tthanks, merged.