Discuss how to improve gsettings security for applications running within the same user context. For example, if application 'foo' is installed from extras, how can we: * allow it to have write access to only its settings? * prevent it from having read access for 'bar'?

What other scenarios should be handled? Should this be integrated with AppArmor and if so, what would it look like?