aa_log_extract_tokens: Fix audit type to be ALLOWED rather than PERMIT
The actual type for "should-be-denied-but-in-complain-mode-so-go-ahead" audit
messages is ALLOWED
, not PERMIT
.
See https://github.com/torvalds/linux/blob/v4.19/security/apparmor/audit.c#L32