How to configure auditd to register like internal bash commands?