[PATCH 1/2] Audit: reorganize struct audit_watch to save 8 bytes