audit: re-structure audit field valid checks