AUDIT_FEATURE_TO_MASK
return af.features & AUDIT_FEATURE_TO_MASK(i);
u32 feature = AUDIT_FEATURE_TO_MASK(i);