Improve performance for document access auditing when using filtering

Document access audit generates a lot of audit events (and contention on trying to write those to disk). It is however possible to configure filtering to reduce the number of actual access will be audited, but unfortunately the filter gets checked after its put in the audit queue (so that there will still be a contention on trying to create the audit events).

This logic should be rewritten so that it scales better when filters is being used.