CAS-1465: added support/logs for audit WHO param as arrays

Definitely, right now the WHO should always show up as UNKNOWN if the arg type passed is `Credential...`