@ikoniaris should be an easy fix, but it is also possible to use --audit_allow_config=false and configure audit with audictl