audit: fix info leak in AUDIT_GET requests