audit_logging: Use dom_sid_str_buf