Maat command auditing