Make `with_auditors` explicitly listen on a "decoy" object

* Previously, `with_auditors` would not update when the `authorizations`
  mapping list changed; now it explicitly listens to that list to ensure
  proper refreshing.