Does anyone know if anything has to be configured in the

asl.conf

on a Mac to get macOS to log Authentication failures to ASL so that osquery can capture them?