I thought this was interesting, especially after previous auditing solutions were one way or the other (never shut down/always shut down). Good to be able to set up some audits that might kill the server, others that don't.