big brother is AUDIToring you...
The process that creates audit trail should always run in a privileged mode,
so it could access and supervise all actions from all users,
and normal user could not stop/change it.
Furthermore, for the same reason, trail file or database table with a trail
should not be accessible to normal users.