auth_log: Use common code from audit_logging