As a security officer, I want staff accesses to cases logged even if those accesses occur while impersonating the doctor or patient.

Yes. You should be able to debug when you're in development or test.