Audit messages during shutdown make the user experience worse and are not useful since they cannot be collected and acted upon, nor usually even read in time.  We should default this to on since the vast majority of users won't ever find it, but would like it on.  Institutions which have audit requirements should have the onus to turn it off rather than the requirement be on the thousands of normal users to turn it on.