what do you think about disabling syscall auditing by default?