audit: show real name for aliases