moving audit_free() up into do_exit()