allow for user-defined stuff  in CIA.audit