[PATCH 2/2] audit: shrink audit_krule by using smaller bitfields