audit: allow ARGV.find

This fixes a false positive for mongodb.

Closes #18370.

Signed-off-by: Adam Vandenberg <flangy@gmail.com>