Working of KAUTH_FILEOP_CLOSE_MODIFIED flag in KAUTH_FILEOP_CLOSE