> Understood, it's arguably violating the principle of least surprise to > allow disable but not enable. Yeah. I'd actually like it if we can enable and disable auditing. I'd just like the behavior to be correct in both cases. -- ljk