I do not believe these are systemd oneshots
Majority of the work for audit