AUDIT_STATE_DISABLED
if (state == AUDIT_STATE_DISABLED) {
if (ctx->state == AUDIT_STATE_DISABLED)
if (state == AUDIT_STATE_DISABLED)
*state = AUDIT_STATE_DISABLED;