[PATCH] fix AUDIT_FILTER_PREPEND handling