@jj and, well, any audit results are only valid at the time of the audit and logging can be done in so many places that no audit will find them :)