diff --git a/docs/incus_lxd_lxc_kvm.md b/docs/incus_lxd_lxc_kvm.md
index 289de4f..39c9491 100644
--- a/docs/incus_lxd_lxc_kvm.md
+++ b/docs/incus_lxd_lxc_kvm.md
@@ -24,7 +24,7 @@ gpu_passthrough_nvidia=0
 systemd_nspawn_user_args=--network-bridge=br1 --resolv-conf=bind-host --bind=/dev/fuse --bind=/dev/kvm --bind=/dev/vsock --bind=/dev/vhost-vsock
 # You generally will not need to change the options below
 systemd_run_default_args=--property=KillMode=mixed --property=Type=notify --property=RestartForceExitStatus=133 --property=SuccessExitStatus=133 --property=Delegate=yes --property=TasksMax=infinity --collect --setenv=SYSTEMD_NSPAWN_LOCK=0
-systemd_nspawn_default_args=--keep-unit --quiet --boot
+systemd_nspawn_default_args=--keep-unit --quiet --boot --bind-ro=/sys/module --inaccessible=/sys/module/apparmor
 ```
 
 Check out [First steps with Incus](https://linuxcontainers.org/incus/docs/main/tutorial/first_steps/).