[PATCH] audit: grab a reference to context->pwd when it's cached