Make `with_auditors` explicitly listen on a "decoy" object

* Previously, `with_auditors` would not update when the `authorizations`
  mapping list changed; now it explicitly listens to that list to ensure
  proper refreshing.
Merge pull request #1132 from reciprocity/feature/fix-auditor-refresh

Make `with_auditors` explicitly listen on a "decoy" object