audit rules watching paths