[RFC PATCH] audit: use current whenever possible