Added /usr/sbin and /usr/libexec auditing.