Audit: reorganize struct audit_watch to save 8 bytes