log.audit, is that a best practice? I have yet to use it, but I've seen it often and in many places.