Backport of MB-33603 to Vulcan.
MB-33603 Filterable audit events for filtered (whitelisted) users are still being logged in audit log