Yeah I’m not sure what it actually translates to on macos. Does it effectively mean logging all sudo commands plus anything that prompts for admin permissions (installer, system preferences, etc)?