Is there a way to increase the audit backlog without the "auditctl -b" tool? When I removed auditd, it got removed as well. I still have an audit.rules file, but the -b setting is being ignored.