I think the audit listener should be doing something else, to me it would be too easy to miss the difference between the log for logging and the log for audit.