SELinux: use new audit hooks, remove redundant exports