TODO comment on audit log.