ENH: filter mysqld-auth can be a is a syslog based service so anchor it ...

...using syslog prefix