audit: add saddr_fam filter field