Support more write-like and chown-like syscalls
Set details.summary in AUDIT_EXECVE so that the summary is able to reflect the full command