audit: call audit_bprm() only once to add AUDIT_EXECVE information