We're actively making the tradeoff that audits are very infrequent compared to authz decisions, so we're okay with it being inefficient at audit