s4:kdc: Generate auditing infomation for NTLM device restrictions