Audit cleanup hardened image

Provide a custom binary just to do audit cleanup in a hardened image.

This will require an extra container to be pushed to both container registries we support. Note for Red Hat this will likely need a UBI base so negates the whole "security" argument.

I have asked for details on the criteria being used to deem it "acceptable", for now security best practices will be assumed.