Follow up on command line auditing