flatpak: Plug the dconf hole
GSettings' keyfile backend has been improved to cover the case of sandboxed applications that don't need to access any shared schemas, so start using it by dropping the permission to access the entire dconf database.
Needs testing before merging.
Edited by Florian Müllner