you should fire off audit events here..