Tweak convert profile to work on api-2

services/filestore/firejail/convert.profile

@@ -16,7 +16,7 @@ blacklist /media
 blacklist /mnt
 blacklist /opt
 blacklist /root
-blacklist /run
+read-only /run
 blacklist /sbin
 blacklist /selinux
 blacklist /src