Configuration Change Auditing

Configuration changes should be logged.  e.g., changes to internal users, session group changes, changes to permissions and roles, etc.