I am trying to figure out how to check which commands root ran on FreeBSD. auditd doesn’t work as expected…