Activate auditing for select files
Directly setting a hashed password
Additional protection against rm -rf *
More fun with attributes
Recording the change
Keeping diffs out of the audit log