Need an API where we can note the authorisation action is internal and shouldn't be audited

Query uses cbauth to check user authorisation, some of which isn't as a result of a direct user action - these checks can result in flooding of audit logs and alarm users.  We'd like to be able to tell cbauth when an authorisation action is internally driven so that it can be exempt from auditing.  This would help reduce the volume of unnecessary audit logging and thereby help improve the utility of auditing.