audit: add netlink multicast group for log read