introduce OC::executeAudited and use in filecache