[file-audit] Use contextlib to operate event session