Workaround issue with user_share_dirs tunable declaration
@{user_share_dirs} declaration does not work as expected - denies to the specified paths are still produced for unknown reasons. See Launchpad bug report 1816470 for more info [0].
Simplify tunable declaration by avoiding use of alternation, in result making relevant rules apply correctly.