audit file creation/deletion