auditd for removable media/harddisks