Audit mode

Alright @opscode/client-engineers, have a look-see.  I'm going to clean up the commit log with an interactive rebase after I'm sure we don't have any branches/PRs pending.

This is the implmentation for https://github.com/opscode/chef-rfc/pull/69
yeah that is probably left over from forking it off master when master was 12.2.0.x before we decided to drop devodd and i used my tardis to go back in time to 12.1.0.x