[PATCH V4 8/8] audit: initialize at subsystem time rather than device time