audit: Add missing AUD_TSTT case