sanitize audit_fd_pair()