Code review comment for lp://qastaging/~jdstrand/snap-confine/preprocessor

There's one serious bug that needs fixing (mentioned inline).

I'm having a little trouble understanding the bigger picture of why we need to preprocess. The card corresponding to this MP suggests that it us for @deny and I don't know exactly what @deny will do so could you briefly explain why preprocessing is needed for @deny?