[file-audit] Show file download audit

Need to call `ev_session.close` after using it.