If I restart auditd, can it lose (not record to the logs) events that happen during the restart?  Or is the restart (and reload of new rules) essentially atomic?