libauparse: read audit events continously?