ckozak: rules audit

Audit events from Rules updates and deletion