Record event when changing is_suspicious
Add test for adding is_suspicious change event