Refactor the audit code into a separate module. Also add a config/blacklists directory to store .yml files of attributes that should be excluded.