About a year ago I enabled apparmor with a bunch of additional rules and noticed some odd denied file read attempts.

I asked around and people blamed it on some Java or pgp stuff. No idea if it's still in there, I can't see it anymore but I also may have disabled all libreoffice plugins.