[BugFix] [Enhancement] [RHEL/6] audit_rules_usergroup_modification OVAL check:
* BugFix       - accept also 'aw', not just 'wa' as permission access type for watch rule,
* Enhancement  - make the check less conservative according to the OVAL check in:
  https://github.com/OpenSCAP/scap-security-guide/blob/master/RHEL/6/input/checks/audit_rules_time_watch_localtime.xml

IOW the check should PASS also in cases the admin wants to audit more strict access type e.g. "rxwa",
than just exactly "wa" (yet IOW the "wa" access type should be minimum / at least type of requirement,
not exact requirement).