documentation: document the audit= kernel start-up parameter