[PATCH 1/7] audit: convert audit watches to use fsnotify instead of inotify