audit_shutdown
EVENTHANDLER_REGISTER(shutdown_pre_sync, audit_shutdown, NULL,
void audit_shutdown(void *arg, int howto);
audit_shutdown(NULL, 0);