Auditing only system admin commands and argument