auditsc: audit_krule mask accesses need bounds checking