We should investigate whether we want to log to the audit log when a user attempts to authenticate with a nonexistent auth mechanism, for example:

> db.auth({user:"amalia", pwd:"123456", mechanism:"fake"});

This currently does not log to the audit log, and we may wish to change that behavior.