Audit: save audit_backlog_limit audit messages in case auditd comes back