doc and auditd tweaks