audit: move audit_aux_data_execve contents into audit_context union