audit: rename FILTER_TYPE to FILTER_EXCLUDE