- Handle user space avcs in prelude plugin
    - Fix watched account login detection for some failed login attempts
    - Couple fixups in audit logging functions (Miloslav Trmac)
    - Add support in auditctl for virtual keys
    - auparse_find_field_next was not iterating correctly, fixed it
    - Add idmef alerts for access or execution of watched file
    - Fix buffer overflow in audit_log_user_command
    - Add basic remote logging plugin - only sends & no flow control
    - Update ausearch with interpret fixes from auparse