Include auditd

We should have various logging enabled as part of our protective
monitoring.