- New message type for trusted apps
    - Add new keywords today, yesterday, now for ausearch and aureport
    - Make audit_log_user_avc_message really send to syslog on error
    - Updated syscall tables in auditctl
    - Deprecated the 'possible' action for syscall rules in auditctl
    - Update watch code to use file syscalls instead of 'all' in auditctl